claude-code-session-manager 0.97.0 → 0.100.0

package/src/preload/__tests__/preload-surface.test.cjs

@@ -0,0 +1,68 @@
+/**
+ * preload-surface.test.cjs — guards against a declared api.d.ts method with
+ * no matching contextBridge expose in preload/index.cjs (the gap this PRD
+ * closes: installSelfScheduleGuard was declared in api.d.ts and handled in
+ * index.cjs, but never exposed on the preload bridge, so the renderer could
+ * never actually call it).
+ *
+ * Outside an Electron runtime, `require('electron')` resolves to a path
+ * string (see node_modules/electron/index.js), not {contextBridge,
+ * ipcRenderer} — and vi.mock('electron') does not reliably intercept a
+ * plain require() of an npm package from a .cjs test file under this
+ * project's vitest setup. So this stubs 'electron' directly in Node's
+ * require cache before requiring preload/index.cjs, which is the real
+ * module under test here.
+ *
+ * Run: timeout 120 npx vitest run src/preload/__tests__/preload-surface.test.cjs
+ */
+
+'use strict';
+
+import { test, beforeAll } from 'vitest';
+const assert = require('node:assert/strict');
+
+let exposedApi;
+const invokeCalls = [];
+
+const electronPath = require.resolve('electron');
+require.cache[electronPath] = {
+  id: electronPath,
+  filename: electronPath,
+  loaded: true,
+  exports: {
+    contextBridge: {
+      exposeInMainWorld: (_name, api) => { exposedApi = api; },
+    },
+    ipcRenderer: {
+      invoke: (channel, payload) => {
+        invokeCalls.push({ channel, payload });
+        return Promise.resolve({ ok: true });
+      },
+      send: () => {},
+      on: () => {},
+      removeListener: () => {},
+    },
+  },
+};
+
+beforeAll(() => {
+  require('../index.cjs');
+});
+
+test('exposes installSelfScheduleGuard, wired to app:install-self-schedule-guard', async () => {
+  assert.strictEqual(typeof exposedApi.app.installSelfScheduleGuard, 'function');
+  await exposedApi.app.installSelfScheduleGuard('/tmp/proj');
+  const call = invokeCalls.find((c) => c.channel === 'app:install-self-schedule-guard');
+  assert.ok(call, 'expected an invoke call on app:install-self-schedule-guard');
+  assert.deepStrictEqual(call.payload, { cwd: '/tmp/proj' });
+});
+
+test('schedule.resetJob sends cwd only when given', async () => {
+  invokeCalls.length = 0;
+  await exposedApi.schedule.resetJob('my-slug');
+  await exposedApi.schedule.resetJob('my-slug', '/tmp/proj');
+  const calls = invokeCalls.filter((c) => c.channel === 'schedule:reset-job');
+  assert.strictEqual(calls.length, 2);
+  assert.deepStrictEqual(calls[0].payload, { slug: 'my-slug' });
+  assert.deepStrictEqual(calls[1].payload, { slug: 'my-slug', cwd: '/tmp/proj' });
+});

package/src/preload/api.d.ts

@@ -1,13 +1,5 @@
 import type { PromptSession } from '../renderer/state/promptSessions';
 
-export interface BuildTarget {
-  registry: string;
-  packageName: string;
-  versionBumpPolicy: string;
-  gates: string[];
-  discovered?: boolean;
-}
-
 export interface ActionOutcome {
   ok: boolean;
   kind?: 'info' | 'warn' | 'error';
@@ -240,7 +232,29 @@ export interface McpCatalogResult {
 /** Mirrors WorkType (src/main/lib/workTypeLibrary.cjs) / EpicTag (tagLibrary.ts) — the
  *  same Epic-mission taxonomy, reused here since an Agent persona's `tags` field is that
  *  same concept, not a free-form string list. */
-export type AgentPersonaTag = 'feature' | 'bug' | 'discussion' | 'build' | 'project-home-builder' | 'bilko-host-publisher';
+export type AgentPersonaTag = 'feature' | 'bug' | 'discussion' | 'build' | 'project-home-builder';
+
+/** One user-defined sidebar HOT KEYS macro (macroLibrary.cjs). `projects` = absolute cwds or `'*'` (every project). */
+export interface Macro {
+  id: string;
+  label: string;
+  agentName: string;
+  tag: AgentPersonaTag;
+  prompt: string;
+  projects: string[];
+  createdAt: string;
+  updatedAt: string;
+}
+
+/** Omit `id` to create; set it to update an existing macro. */
+export interface MacroSaveInput {
+  id?: string;
+  label: string;
+  agentName: string;
+  tag: AgentPersonaTag;
+  prompt: string;
+  projects?: string[];
+}
 
 /** One global `~/.claude/agents/<name>.md` persona, per the Agent Library nav page. */
 export interface AgentPersona {
@@ -264,6 +278,8 @@ export interface AgentPersona {
   /** "<Department> — <Human title>" (e.g. "Engineering — Architect"), free text — drives
    *  department grouping in the New Epic Agent picker. Optional/null when not set. */
   title?: string | null;
+  /** Bundled-persona version stamp (seedAgentPersonas.cjs). Null for a persona that was never seeded, or has no stamp. */
+  seedVersion?: number | null;
   path: string;
   body: string;
   /** Project names (basename of cwd) whose currently-open tab overlays this agent. */
@@ -293,6 +309,8 @@ export interface AgentPersonaSaveInput {
   title?: string;
   /** Open project name: write that project's frontmatter-only override (only `model`/`effort` are used) instead of the global file. */
   projectName?: string;
+  /** Bundled-persona version stamp (seedAgentPersonas.cjs). Omit to carry over the existing file's stamp unchanged. */
+  seedVersion?: number;
   body: string;
 }
 
@@ -1309,76 +1327,6 @@ export interface ProjectPagesGetResult {
   mtimeMs: number | null;
 }
 
-// ────────────────────────────────────────────── Host on Bilko.run
-export interface BilkoHostBundleManifest {
-  schemaVersion: 1;
-  slug: string;
-  version: string;
-  builtAt: string;
-  gitSha: string;
-  gitBranch: string;
-  hostKit: { version: string };
-  golden: { path: string; expect: string };
-  health: Record<string, unknown>;
-  bundle: { sizeBytesGz: number; fileCount: number };
-  /** Not part of the host-contract schema itself — this app's own staleness bookkeeping (see BilkoHostGetResult.bundleStale). */
-  documentCount: number;
-  documents: Array<{ subpath: string; title: string }>;
-}
-
-export type BilkoHostPublishStatus =
-  | 'not-published'
-  | 'bundle-ready'
-  | 'publishing'
-  | 'published'
-  | 'publish-failed';
-
-export interface BilkoHostPublishState {
-  status: BilkoHostPublishStatus;
-  slug: string;
-  url?: string;
-  lastAttemptAt?: string;
-  lastError?: string;
-}
-
-export type BilkoHostDocumentSource =
-  | { kind: 'project-page-lens'; lens: 'home' | 'marketing' | 'feature' | 'architecture' }
-  | { kind: 'file'; path: string };
-
-export interface BilkoHostDocument {
-  id: string;
-  /** '' for the root document (dist/index.html); otherwise a '/'-joined lowercase-kebab path, e.g. 'special-doc/01'. */
-  subpath: string;
-  title: string;
-  source: BilkoHostDocumentSource;
-  addedAt: string;
-  /** Where this document resolves once published, given the project's current/derived slug. */
-  url: string;
-}
-
-export interface BilkoHostGetResult {
-  hasMarketingPage: boolean;
-  projectName: string;
-  packagePrivate: boolean;
-  packageHomepage: string | null;
-  packageVersion: string;
-  defaultSlug: string;
-  documents: BilkoHostDocument[];
-  /** True when the on-disk dist/ bundle doesn't reflect the current document list — Prepare Bundle (then Publish) is owed. */
-  bundleStale: boolean;
-  bundleManifest: BilkoHostBundleManifest | null;
-  publishState: BilkoHostPublishState | null;
-}
-
-export interface BilkoHostPrepareBundleResult {
-  distPath: string;
-  manifest: BilkoHostBundleManifest;
-}
-
-export interface BilkoHostDocumentListResult {
-  documents: Array<Omit<BilkoHostDocument, 'url'>>;
-}
-
 // ────────────────────────────────────────────── Per-subagent memory
 // Stored at ~/.claude/session-manager/agent-memory/<agentId>.json. Keyed by
 // agent name (the .md filename in ~/.claude/agents/), not by workspace cwd.
@@ -1489,7 +1437,7 @@ export interface ChatCreatePrdPayload {
   /** Originating tab id — used at job completion to route a status prompt back into the tab. */
   sourceTabId?: string;
   /** User-selected Feature/Bug tag (PRD 774) carried from the originating PromptTicket. */
-  tag?: 'feature' | 'bug' | 'discussion' | 'build' | 'project-home-builder' | 'bilko-host-publisher';
+  tag?: 'feature' | 'bug' | 'discussion' | 'build' | 'project-home-builder';
 }
 
 export type ChatCreatePrdResult =
@@ -1580,8 +1528,6 @@ export interface SessionManagerAPI {
     engageRulesPath: () => Promise<string | null>;
     pickDirectory: () => Promise<string | null>;
     gitBranch: (cwd: string) => Promise<string | null>;
-    /** Publish target for 'build'-tagged Epics — null disables the Build toolbar button. */
-    resolveBuildTarget: (cwd: string) => Promise<BuildTarget | null>;
     /** Default: request a drain-first restart. `force: true` restarts immediately, killing running jobs. */
     rebootApp: (opts?: { force?: boolean }) => void;
     testFireHook: (args: TestFireHookArgs) => Promise<TestFireHookResult>;
@@ -1708,6 +1654,15 @@ export interface SessionManagerAPI {
     /** Fires after any save/delete/removeOverride — subscribers should re-fetch listPersonas(). */
     onChanged: (handler: () => void) => () => void;
   };
+  macros: {
+    list: () => Promise<Macro[]>;
+    save: (payload: MacroSaveInput) => Promise<Macro>;
+    delete: (payload: { id: string }) => Promise<{ ok: boolean }>;
+    /** Add/remove one project cwd. A macro shown in every project (`'*'`) cannot be narrowed: `{ ok: false, error: 'macro is shown in every project' }`. */
+    setProject: (payload: { id: string; cwd: string; enabled: boolean }) => Promise<{ ok: true; macro: Macro } | { ok: false; error: string }>;
+    /** Fires after any save/delete/setProject — re-fetch list(). */
+    onChanged: (handler: () => void) => () => void;
+  };
   models: {
     /** Live model/effort catalog (`modelCatalog.cjs`'s `resolveModelCatalog`). Never rejects from
      *  the resolver itself — a failed probe degrades down cache → floor and sets `degraded`.
@@ -1855,7 +1810,9 @@ export interface SessionManagerAPI {
       min: number; max: number; default: number; envOverride: boolean;
     }>;
     setConfig: (partial: Partial<ScheduleConfig & { supervisor?: Partial<SupervisorConfig> }>) => Promise<{ ok: boolean; config: ScheduleConfig }>;
-    resetJob: (slug: string) => Promise<{ ok: boolean; error?: string }>;
+    /** `cwd`, when given, narrows the match to that project's job row — two
+     *  different projects can independently produce the identical slug. */
+    resetJob: (slug: string, cwd?: string) => Promise<{ ok: boolean; error?: string }>;
     runNow: () => Promise<{ ok: boolean }>;
     forceTick: () => Promise<ActionOutcome>;
     pause: () => Promise<{ ok: boolean }>;
@@ -1968,16 +1925,6 @@ export interface SessionManagerAPI {
     /** Fires whenever a watched cwd's home.html is added/changed/removed, carrying the freshly read result. */
     onChanged: (handler: (payload: { cwd: string } & ProjectPagesGetResult) => void) => () => void;
   };
-  bilkoHost: {
-    /** Read compatibility-gate inputs + any existing bundle/publish state. Never fires an LLM call. */
-    get: (cwd: string) => Promise<BilkoHostGetResult>;
-    /** Stage A: rebuild the whole dist/ tree + dist/manifest.json from the current document list. Pure, no cost, idempotent. */
-    prepareBundle: (cwd: string, slug: string) => Promise<BilkoHostPrepareBundleResult>;
-    /** Add a hosted sub-path document (never the root, which always exists). Does not touch dist/ — Prepare Bundle picks it up. */
-    addDocument: (cwd: string, subpath: string, title: string, source: BilkoHostDocumentSource) => Promise<BilkoHostDocumentListResult>;
-    /** Remove a hosted document (never the root). Only updates documents.json — the file stays live until the next Prepare Bundle + Publish. */
-    removeDocument: (cwd: string, id: string) => Promise<BilkoHostDocumentListResult>;
-  };
   promptSessionTranscript: {
     /** Append one full-text turn to an Epic's durable JSONL transcript. Best-effort — resolves `{ok:false}` rather than throwing on failure. */
     append: (
@@ -2116,7 +2063,7 @@ export interface PromptSessionsMergeActiveIndexResult {
 export interface PromptSessionsCreateEpicPayload {
   cwd: string;
   goalText: string;
-  tag?: 'feature' | 'bug' | 'discussion' | 'build' | 'project-home-builder' | 'bilko-host-publisher';
+  tag?: 'feature' | 'bug' | 'discussion' | 'build' | 'project-home-builder';
   agentType?: string;
   /** Per-Epic model/effort overrides (New Session card); omitted = the persona's own. */
   model?: string;

package/src/preload/index.cjs

@@ -9,7 +9,6 @@ contextBridge.exposeInMainWorld('api', {
     engageRulesPath: () => ipcRenderer.invoke('app:engage-rules-path'),
     pickDirectory: () => ipcRenderer.invoke('app:pick-directory'),
     gitBranch: (cwd) => ipcRenderer.invoke('app:git-branch', { cwd }),
-    resolveBuildTarget: (cwd) => ipcRenderer.invoke('build:resolve-target', { cwd }),
     rebootApp: (opts) => ipcRenderer.send('app:reboot-app', opts),
     archiveProject: (encoded) => ipcRenderer.invoke('app:archive-project', { encoded }),
     testFireHook: (args) => ipcRenderer.invoke('app:test-fire-hook', args),
@@ -27,6 +26,7 @@ contextBridge.exposeInMainWorld('api', {
     installPrdWriteGuard: (cwd) => ipcRenderer.invoke('app:install-prd-write-guard', { cwd }),
     installDestructiveGitGuard: (cwd) => ipcRenderer.invoke('app:install-destructive-git-guard', { cwd }),
     installInlineImplementationGuard: (cwd) => ipcRenderer.invoke('app:install-inline-implementation-guard', { cwd }),
+    installSelfScheduleGuard: (cwd) => ipcRenderer.invoke('app:install-self-schedule-guard', { cwd }),
     onNewSession: (handler) => {
       const listener = () => handler();
       ipcRenderer.on('app:new-session', listener);
@@ -117,6 +117,18 @@ contextBridge.exposeInMainWorld('api', {
       return () => ipcRenderer.removeListener('agents:changed', listener);
     },
   },
+  macros: {
+    list: () => ipcRenderer.invoke('macros:list'),
+    save: (payload) => ipcRenderer.invoke('macros:save', payload),
+    delete: (payload) => ipcRenderer.invoke('macros:delete', payload),
+    setProject: (payload) => ipcRenderer.invoke('macros:set-project', payload),
+    // Fired after any save/delete/set-project so every subscriber re-fetches list().
+    onChanged: (handler) => {
+      const listener = () => handler();
+      ipcRenderer.on('macros:changed', listener);
+      return () => ipcRenderer.removeListener('macros:changed', listener);
+    },
+  },
   models: {
     catalog: (payload) => ipcRenderer.invoke('models:catalog', payload),
   },
@@ -239,7 +251,7 @@ contextBridge.exposeInMainWorld('api', {
     worktreeBase: () => ipcRenderer.invoke('schedule:worktree-base'),
     setSessionSlots: (cap) => ipcRenderer.invoke('schedule:set-session-slots', { cap }),
     setConfig: (partial) => ipcRenderer.invoke('schedule:set-config', partial),
-    resetJob: (slug) => ipcRenderer.invoke('schedule:reset-job', { slug }),
+    resetJob: (slug, cwd) => ipcRenderer.invoke('schedule:reset-job', cwd ? { slug, cwd } : { slug }),
     runNow: () => ipcRenderer.invoke('schedule:run-now'),
     forceTick: () => ipcRenderer.invoke('schedule:force-tick'),
     pause: () => ipcRenderer.invoke('schedule:pause'),
@@ -336,13 +348,6 @@ contextBridge.exposeInMainWorld('api', {
       return () => ipcRenderer.removeListener('project-pages:changed', listener);
     },
   },
-  bilkoHost: {
-    get: (cwd) => ipcRenderer.invoke('bilko-host:get', { cwd }),
-    prepareBundle: (cwd, slug) => ipcRenderer.invoke('bilko-host:prepare-bundle', { cwd, slug }),
-    addDocument: (cwd, subpath, title, source) =>
-      ipcRenderer.invoke('bilko-host:add-document', { cwd, subpath, title, source }),
-    removeDocument: (cwd, id) => ipcRenderer.invoke('bilko-host:remove-document', { cwd, id }),
-  },
   promptSessionTranscript: {
     append: (cwd, epicId, turn) =>
       ipcRenderer.invoke('promptSessionTranscript:append', { cwd, epicId, ...turn }),

package/src/seed/agents/architect.md

@@ -5,6 +5,7 @@ tools: Read, Grep, Glob, Bash, Edit, Write
 model: opus
 tags: feature, bug, discussion
 title: Engineering — Architect
+seedVersion: 1
 ---
 
 You are the architect. You are the one Actor a human talks to for the whole life of an Epic's

package/src/seed/agents/dev-lead.md

@@ -4,6 +4,7 @@ description: Executes exactly one already-scoped PRD at a time, headless, start
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: sonnet
 title: Engineering — Software Engineer
+seedVersion: 2
 ---
 
 You are dev-lead. You execute one PRD — nothing above it, nothing beyond it. You don't decide
@@ -25,24 +26,22 @@ points you at), and the project's own files.
 
 ## Run contract (execute in this order — the scheduler grades you on it)
 
-0. ORIENT (≤ 8 tool calls): read the PRD's `Read first:` files and ONLY those. Do not survey the repo.
-1. RED: write or extend the named test so it fails for the right reason. Run it once, captured: `<test cmd> 2>&1 | tail -20 || true`.
-2. BUILD: make exactly the changes the AC names. Touch no file the PRD does not name unless the build breaks without it — then say so in the report.
-3. GATE: run the PRD's single gate line, `timeout`-wrapped, in the foreground, as the LAST command of the run. Red → fix it or `exit 1`; never continue on red.
-4. COMMIT: `git add <exact paths>` then `git commit -m "<type>(<scope>): <summary>"`. Never `git add -A` / `git add .`; never stash, reset, checkout or clean anything you did not create.
-5. VERDICT: last line `SCHEDULER_VERDICT: PASS` only if step 3 was green AND step 4 landed; otherwise `SCHEDULER_VERDICT: FAIL <reason>` and `exit 1`.
-
-Verifier traps — each has parked a green run before:
-- Absence checks: `if grep …; then echo HALT; exit 1; fi; echo clean` — a bare no-match grep exits 1 and reads as an error.
-- Expected failures (a red test, a probe) run EARLY and captured; nothing may error after the gate.
-- A probe that errors: re-run it corrected at once, or print `# expected/handled: <why>` on the next line.
-- A `timeout` exit 124 you expected: branch on 124 and print OK; never leave a bare 124.
-- Never background a verification, never call ScheduleWakeup/Monitor/agents, never invoke /develop or queue work — this process has no next turn.
-- `gh pr checks` exits 8 while pending: wrap it and annotate; poll with the identical command each time.
-- Retry a transient failure with the SAME command text so the verifier pairs the recovery with the failure.
-
-Out of contract: anything past the AC list. If the PRD looks wrong, do the AC as written and say why in the report.
-Reasoning for every line above: `standards.md` (the PRD names its path) — consult one section when a line here is unclear; do not re-read it every run.
+0. ORIENT. Make at most 8 tool calls. Read the PRD's `# Files` section and the `Read first:` list in its implementation notes, then read those files, before anything else. Why: the PRD already decided what you need; re-surveying the repo burns the call budget for nothing.
+1. RED. Write or extend the test the PRD names so it fails for the right reason. Run it once, early, and capture the output: `timeout 120 <test cmd> 2>&1 | tail -20 || true`. Why: a captured red run proves the test checks the change before your fix makes it green. If the PRD changes only docs or config and names no test, skip this step.
+2. BUILD. Change only the files listed in `# Files`. If you need another file, change it and say why in your report. Why: an edit outside the list collides with another PRD's own edit to that file.
+3. FINISH. Follow the SCHEDULER FINISH PROTOCOL at the end of your prompt — do not run the gate, commit, or print a verdict yourself outside it. That protocol runs the `# Gate` commands in order, commits with exact paths, and prints the scheduler's own last line, `SCHEDULER_VERDICT: PASS`, only when the gate came back green and the commit landed.
+
+Verifier traps — each one has parked a green run before:
+- A bare absence check reads as an error. Write it `if grep …; then echo HALT; exit 1; fi; echo clean` so a clean result exits 0.
+- Run an expected failure (a red test, a probe) early and capture its output. Nothing may error after the gate runs.
+- When a probe errors, re-run it corrected at once, or print `# expected/handled: <why>` on the next line. Never leave an unexplained error in the transcript.
+- A `timeout` that exits 124 as expected still needs a branch: print OK on 124, never leave a bare 124 in the output.
+- Never call ScheduleWakeup or Monitor, never start background work, never invoke /develop or queue work. The finish protocol's review steps are the only exception: run them in the foreground.
+- `gh pr checks` exits 8 while a run is still pending. Wrap it, annotate the exit code, and poll with the identical command each time.
+- Retry a transient failure with the exact same command text, so the verifier can pair the recovery with the failure it recovered from.
+
+Out of contract: anything past the Acceptance Criteria list. If the PRD looks wrong, do the AC as written anyway and say why in your report — don't expand or redesign it yourself.
+`standards.md` (the PRD names its path) carries the reasoning behind every line above. Open the one section you need; don't re-read the whole file every run.
 
 ## What you don't do
 

package/src/seed/agents/project-home-builder.md

@@ -3,6 +3,7 @@ name: project-home-builder
 description: Reads a project and writes ONE self-contained overview page (home.html) for its Project Home tab, then saves it with a single project_home_write call.
 tools: Read, Grep, Glob, Bash, Write, Edit
 title: Project Home — Builder
+seedVersion: 1
 ---
 
 You are the project-home-builder. Your whole job is to read the real project and produce a single

package/src/seed/agents/validator.md

@@ -1,9 +1,10 @@
 ---
 name: validator
-description: Validates a finished PLAN (the PRDs that share one planId) once, after its last PRD lands — re-runs each PRD's gate, checks every acceptance criterion against the real tree, reviews the plan's combined diff, and reports one VERIFIED/REFUTED verdict per PRD via sentinel lines. Runs headless as a scheduled PRD (agentType: validator); never edits product code and never queues work.
+description: Validates a finished PLAN (the PRDs its validate PRD lists) once, after its last PRD lands — re-runs each PRD's gate, checks every acceptance criterion against the real tree, reviews the plan's combined diff, and reports one VERIFIED/REFUTED verdict per PRD via sentinel lines. Runs headless as a scheduled PRD (agentType: validator); never edits product code and never queues work.
 tools: Read, Grep, Glob, Bash
 model: sonnet
 title: Engineering — Plan Validator
+seedVersion: 2
 ---
 
 You are validator. You judge whether a plan's PRDs actually landed what they promised. You do not fix anything, you do not re-implement, you do not queue PRDs — your output is evidence and verdicts, read by the architect who owns the plan.
@@ -14,9 +15,14 @@ Your PRD's `# Acceptance criteria` lists the plan's PRD slugs and where each PRD
 
 ## Procedure (in this order)
 
-1. For each PRD slug, find its landed commit(s): `git log --oneline --since=<plan start> --grep=<slug>`, then the paths its AC names. No commit and no diff on an implementation PRD → REFUTED ("nothing landed").
-2. For each AC line, produce ONE line of evidence: the `file:line` you read, or the captured output of the command it names. Re-run each PRD's gate command exactly as written (foreground, `timeout`-wrapped).
-3. Review the plan's combined diff once: `git diff <base>..HEAD --stat`, then the diff. Run `/code-review` and `/security-review` on it if available in this environment — synchronously, never as a background agent; otherwise self-review for correctness, unsafe input handling, secrets, path traversal, and duplication of an existing helper.
+1. Read the `Base: <sha>` line in your PRD's implementation notes. For each PRD slug, list its
+   commits: `git log --oneline <base>..HEAD -- <each path in that PRD's # Files section>`. Why:
+   commit messages do not carry the slug. No `Base:` line → use
+   `git log --oneline -30 -- <paths>` and say in the record that the base was unknown. No commit
+   and no diff on an implementation PRD → REFUTED ("nothing landed").
+2. For each acceptance criterion, write ONE line of evidence: the `file:line` you read, or the captured output of a command you ran. Then re-run every command in each PRD's `# Gate` section, in order, in the foreground. If a PRD has no `# Gate` section, re-run the gate command in its acceptance criteria. If the gate is `none`, the per-criterion evidence is the whole check.
+3. Review the plan's combined diff once: `git diff <base>..HEAD --stat` (<base> is the SHA from
+   step 1), then the diff. Run `/code-review` and `/security-review` on it if available in this environment — synchronously, never as a background agent; otherwise self-review for correctness, unsafe input handling, secrets, path traversal, and duplication of an existing helper.
 4. Write the review record to the path your PRD names (Markdown: one section per PRD with verdict + evidence, then a Findings section ranked Critical / Important / Minor with `file:line`), `git add` that ONE file, commit it.
 5. Finish with the sentinel block — one line per PRD, then the scheduler's own verdict line:
    VALIDATION: <slug> VERIFIED

package/dist/assets/HostBilko-nESrTRIg.js

@@ -1 +0,0 @@
-import{az as i,aO as Q,b0 as P,aN as m,a0 as V,aQ as Y,ak as t,m as T,aI as W}from"./index-tn5JIVPj.js";import"./monaco-editor-BW5C4Iv1.js";function X(r){return r.hasMarketingPage?r.packagePrivate&&!r.packageHomepage?{kind:"private-needs-confirm"}:{kind:"ready"}:{kind:"no-marketing-page"}}const Z=["home","marketing","feature","architecture"],ee={home:"Home page",marketing:"Marketing page",feature:"Feature page",architecture:"Architecture page"};function $(r){return ee[r]}function D(r){const n=r.find(l=>l.subpath==="");return Z.map(l=>{const p=r.find(h=>h.source.kind==="project-page-lens"&&h.source.lens===l);return p?{lens:l,status:p.subpath===""?"root":"hosted",subpath:p.subpath,documentId:p.id}:!n&&l==="marketing"?{lens:l,status:"root",subpath:"",documentId:null}:{lens:l,status:"available",subpath:l,documentId:null}})}function te(r){return r.trim().toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"").slice(0,64)||"project"}const j="bilko-host-publisher",se="bilko-host-publisher",ne=[{value:"home",label:"Home lens"},{value:"marketing",label:"Marketing lens"},{value:"feature",label:"Feature lens"},{value:"architecture",label:"Architecture lens"}];function ae(r,n){for(const l of Object.values(r))if(l.cwd===n&&l.tag===j&&l.status==="active")return l;return null}function _(r){W(r),window.dispatchEvent(new CustomEvent("sm:navigate",{detail:"terminal"}))}function oe(){const r=Q(),n=(r==null?void 0:r.cwd)??null,l=P(e=>e.sessions),p=P(e=>e.createPromptSession),h=P(e=>e.approveProposed),[o,C]=i.useState(null),[O,k]=i.useState(!1),[b,v]=i.useState(""),[E,H]=i.useState(!1),[B,M]=i.useState(!1),[u,A]=i.useState(null),[N,L]=i.useState(""),[f,I]=i.useState(""),[w,R]=i.useState("feature");i.useEffect(()=>{let e=!1;return window.api.agents.listPersonas().then(a=>{if(e)return;const s=a.find(g=>g.name===se);A(s?{name:s.name,description:s.description}:null)}).catch(()=>{e||A(null)}),()=>{e=!0}},[]);const c=i.useCallback(()=>{n&&(k(!1),window.api.bilkoHost.get(n).then(e=>{C(e),v(a=>{var s;return a||((s=e.bundleManifest)==null?void 0:s.slug)||e.defaultSlug}),k(!0)}).catch(e=>{k(!0),m.error(`Could not load bilko-host status: ${e instanceof Error?e.message:String(e)}`)}))},[n]);i.useEffect(()=>{C(null),v(""),H(!1),c()},[c]);const x=n?ae(l,n):null,z=i.useCallback(()=>{!n||!b||(M(!0),window.api.bilkoHost.prepareBundle(n,b).then(()=>c()).catch(e=>m.error(`Could not prepare bundle: ${e instanceof Error?e.message:String(e)}`)).finally(()=>M(!1)))},[n,b,c]),F=i.useCallback(()=>{if(!n)return;const e=te(N).replace(/^-+|-+$/g,"");if(!e||!f.trim()){m.error("A sub-path and a title are required.");return}const a={kind:"project-page-lens",lens:w};window.api.bilkoHost.addDocument(n,e,f.trim(),a).then(()=>{L(""),I(""),c()}).catch(s=>m.error(`Could not add document: ${s instanceof Error?s.message:String(s)}`))},[n,N,f,w,c]),G=i.useCallback((e,a)=>{n&&window.api.bilkoHost.addDocument(n,a,$(e),{kind:"project-page-lens",lens:e}).then(()=>c()).catch(s=>m.error(`Could not add ${e} page: ${s instanceof Error?s.message:String(s)}`))},[n,c]),U=i.useCallback(async()=>{if(!n||!o)return;const e=D(o.documents).filter(a=>a.status==="available");for(const a of e)try{await window.api.bilkoHost.addDocument(n,a.subpath,$(a.lens),{kind:"project-page-lens",lens:a.lens})}catch(s){m.error(`Could not add ${a.lens} page: ${s instanceof Error?s.message:String(s)}`)}c()},[n,o,c]),q=i.useCallback(e=>{n&&window.api.bilkoHost.removeDocument(n,e).then(()=>c()).catch(a=>m.error(`Could not remove document: ${a instanceof Error?a.message:String(a)}`))},[n,c]),J=i.useCallback(async()=>{if(!n||!b)return;if(x){_(x.id);return}const e=`Publish this project to bilko.run as a static-path listing, slug "${b}". Bundle is at session-manager-operations/bilko-host/dist/ (prepare it first via Prepare Bundle if it's missing or stale) — it may contain multiple documents (a root page plus sub-paths); publish the whole dist/ tree as one static-path app.`,{goalText:a,openingPrompt:s}=V({title:"",goal:e,tag:j,agentName:u==null?void 0:u.name,agentDescription:(u==null?void 0:u.description)??void 0}),g=u?await p(n,a,j,"HostBilko",u.name):await p(n,a,j,"HostBilko");h(g.id,"HostBilko"),Y.getState().send({tabId:g.id,sessionId:g.claudeSessionId,cwd:n,prompt:s}),_(g.id)},[n,b,x,p,h,u]);if(!n)return t.jsx(T,{title:"Open a project to host it on Bilko.run"});if(!O||!o)return null;const y=X(o);if(y.kind==="no-marketing-page")return t.jsx(T,{title:"No Marketing page yet",hint:"Generate this project's Project Pages from Project Home first — the root document publishes the Marketing lens."});const d=o.publishState,K=(d==null?void 0:d.status)??(o.bundleManifest?"bundle-ready":"not-published"),S=y.kind==="ready"||E;return t.jsxs("div",{className:"max-w-2xl space-y-4",children:[t.jsxs("div",{className:"rounded-card border border-line bg-bg-hi p-5 space-y-4",children:[t.jsxs("div",{className:"flex items-center justify-between",children:[t.jsxs("div",{children:[t.jsx("div",{className:"font-serif text-lg text-fg",children:o.projectName}),t.jsxs("div",{className:"text-xs text-fg-faint mt-0.5",children:["Status: ",t.jsx("span",{className:"font-mono",children:K}),o.bundleStale&&o.bundleManifest&&t.jsx("span",{className:"ml-2 text-accent",children:"bundle out of date — Prepare Bundle again"})]})]}),(d==null?void 0:d.status)==="published"&&d.url&&t.jsx("a",{href:d.url,target:"_blank",rel:"noreferrer",className:"text-xs text-accent hover:underline",children:d.url})]}),y.kind==="private-needs-confirm"&&!E&&t.jsxs("div",{className:"rounded-md border border-line bg-bg p-3 text-xs text-fg-dim",children:["This project's package.json is marked private with no public homepage. Confirm you want to publish it to bilko.run anyway.",t.jsx("button",{type:"button",onClick:()=>H(!0),className:"mt-2 block rounded-md bg-accent px-3 py-1.5 text-xs font-semibold text-bg-hi hover:bg-accent-dark",children:"Yes, this can be public"})]}),S&&t.jsxs(t.Fragment,{children:[t.jsxs("label",{className:"block text-xs text-fg-faint",children:["Slug (bilko.run/projects/<slug>/)",t.jsx("input",{value:b,onChange:e=>v(e.target.value.toLowerCase()),className:"mt-1 block w-full rounded-md border border-line bg-bg px-2.5 py-1.5 text-sm font-mono text-fg"})]}),t.jsxs("div",{className:"flex items-center gap-2",children:[t.jsx("button",{type:"button",onClick:z,disabled:B,className:"rounded-md border border-line bg-bg px-3.5 py-1.5 text-xs font-semibold text-fg hover:bg-bg-hi disabled:opacity-50",children:B?"Preparing…":"Prepare Bundle"}),t.jsx("button",{type:"button",onClick:()=>{J().catch(e=>{m.error(e instanceof Error?e.message:String(e))})},disabled:!o.bundleManifest,title:o.bundleManifest?void 0:"Prepare a bundle first",className:"rounded-md bg-accent px-3.5 py-1.5 text-xs font-semibold text-bg-hi hover:bg-accent-dark disabled:opacity-50",children:x?"View publish in progress":"Publish"})]}),o.bundleManifest&&t.jsxs("div",{className:"text-[11px] text-fg-faint font-mono",children:["bundle: ",(o.bundleManifest.bundle.sizeBytesGz/1024).toFixed(1)," KB gz ·"," ",o.bundleManifest.bundle.fileCount," document",o.bundleManifest.bundle.fileCount===1?"":"s"," · built"," ",new Date(o.bundleManifest.builtAt).toLocaleString()," · ",o.bundleManifest.gitSha]}),(d==null?void 0:d.status)==="publish-failed"&&d.lastError&&t.jsxs("div",{className:"text-xs text-accent",children:["Last publish failed: ",d.lastError]})]})]}),S&&(()=>{const e=D(o.documents),a=e.filter(s=>s.status==="available").length;return t.jsxs("div",{className:"rounded-card border border-line bg-bg-hi p-5 space-y-3",children:[t.jsxs("div",{className:"flex items-center justify-between",children:[t.jsx("div",{className:"font-serif text-base text-fg",children:"Project Pages"}),a>1&&t.jsxs("button",{type:"button",onClick:U,className:"text-xs text-accent hover:underline",children:["Host all ",a," remaining"]})]}),t.jsxs("p",{className:"text-xs text-fg-faint",children:["This project generates 4 pages (Home / Marketing / Feature / Architecture). Marketing is the project's root (bilko.run/projects/",b||"<slug>","/); host any of the others as their own sub-page if you want them public too."]}),t.jsx("ul",{className:"space-y-1.5",children:e.map(s=>t.jsxs("li",{className:"flex items-center justify-between gap-2 rounded-md border border-line bg-bg px-3 py-2 text-xs",children:[t.jsxs("div",{className:"min-w-0",children:[t.jsx("div",{className:"text-fg capitalize",children:s.lens}),t.jsx("div",{className:"text-fg-faint font-mono truncate",children:s.status==="root"?"(project root)":`/${s.subpath}/`})]}),s.status==="available"?t.jsxs("button",{type:"button",onClick:()=>G(s.lens,s.subpath),className:"shrink-0 rounded-md border border-line px-2 py-1 text-fg hover:bg-bg-hi",children:["+ Host as /",s.subpath,"/"]}):t.jsx("span",{className:"shrink-0 text-fg-faint",children:s.status==="root"?"root":"hosted"})]},s.lens))})]})})(),S&&t.jsxs("div",{className:"rounded-card border border-line bg-bg-hi p-5 space-y-3",children:[t.jsx("div",{className:"font-serif text-base text-fg",children:"Hosted documents"}),t.jsx("p",{className:"text-xs text-fg-faint",children:"One project, one Bilko listing — add as many explanatory pages as you want under it, each at its own sub-path. Removing one here takes it down on the next Publish."}),t.jsx("ul",{className:"space-y-1.5",children:o.documents.map(e=>t.jsxs("li",{className:"flex items-center justify-between gap-2 rounded-md border border-line bg-bg px-3 py-2 text-xs",children:[t.jsxs("div",{className:"min-w-0",children:[t.jsx("div",{className:"text-fg truncate",children:e.title}),t.jsxs("div",{className:"text-fg-faint font-mono truncate",children:[e.subpath===""?"(root)":`/${e.subpath}/`," · ",e.url]})]}),e.subpath!==""&&t.jsx("button",{type:"button",onClick:()=>q(e.id),title:"Remove — takes effect on the next Publish",className:"shrink-0 rounded-md border border-line px-2 py-1 text-fg-faint hover:text-accent hover:border-accent/40",children:"Remove"})]},e.id))}),t.jsxs("div",{className:"rounded-md border border-line bg-bg p-3 space-y-2",children:[t.jsx("div",{className:"text-[11px] font-semibold uppercase tracking-wide text-fg-faint",children:"Add a document"}),t.jsxs("div",{className:"grid grid-cols-2 gap-2",children:[t.jsx("input",{value:N,onChange:e=>L(e.target.value),placeholder:"sub-path, e.g. special-doc/01",className:"rounded-md border border-line bg-bg-hi px-2.5 py-1.5 text-xs font-mono text-fg"}),t.jsx("input",{value:f,onChange:e=>I(e.target.value),placeholder:"Title",className:"rounded-md border border-line bg-bg-hi px-2.5 py-1.5 text-xs text-fg"})]}),t.jsxs("div",{className:"flex items-center gap-2",children:[t.jsx("select",{value:w,onChange:e=>R(e.target.value),className:"rounded-md border border-line bg-bg-hi px-2.5 py-1.5 text-xs text-fg",children:ne.map(e=>t.jsx("option",{value:e.value,children:e.label},e.value))}),t.jsx("button",{type:"button",onClick:F,className:"rounded-md border border-line bg-bg-hi px-3.5 py-1.5 text-xs font-semibold text-fg hover:bg-bg",children:"Add document"})]})]})]})]})}const le=i.memo(oe);export{le as HostBilko};